$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft File: JU6vZJB1T1B9uBzpDdtim2IvRmA.mft (raw, json) Hash identifier: r3EHqioqz569QGORskEU9N4GqtwVmJGPni5dh74hjp4= Subject key identifier: DB:F8:C9:30:FF:48:D8:1B:32:53:E0:72:40:A0:3D:D9:6D:75:D4:3B Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 Certificate issuer: /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft Manifest number: FB Signing time: Sat 19 Jul 2025 05:26:40 +0000 Manifest this update: Sat 19 Jul 2025 05:26:40 +0000 Manifest next update: Sat 26 Jul 2025 05:26:40 +0000 Files and hashes: 1: JU6vZJB1T1B9uBzpDdtim2IvRmA.crl (hash: 2EtpSdZgSko8qdI79jyOsmOjBMG2vfT8yh0GrypTdsk=) 2: 0B2E53E422B711EFB2B15160C4F9AE02.roa (hash: dc2h2jrx/pzY7NawNYOcmGXVTRsJnjaghC5xI/+fBaQ=) 3: FD6286EA22B611EFBF5D3960C4F9AE02.roa (hash: M93I+sdFWlIBfdq9LG68VSm5ThgyN+STMXDJdl1g8Sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B8D0, serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Validity Not Before: Jul 19 05:26:40 2025 GMT Not After : Jul 26 05:26:40 2025 GMT Subject: CN=687b2c90-d09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:53:9f:5c:b3:59:27:cd:a6:63:93:54:c2:77: 96:46:22:65:ea:b1:b8:94:12:20:57:80:dd:37:a7: 3a:2c:2b:76:df:e9:f4:9b:4c:07:74:89:7e:25:cb: b5:45:62:9c:fc:1b:ae:64:28:65:90:88:16:e1:d6: 68:b0:8f:ee:43:f0:c0:fc:bc:c7:1d:08:19:42:c6: dd:c8:e3:8b:d7:0b:bf:59:fb:db:d7:5d:62:03:8c: d6:a7:28:ae:6b:62:2c:92:ac:11:cb:7d:3c:55:61: 88:3c:cd:4a:17:28:06:c0:f3:2f:2b:dc:48:99:2b: 34:d9:67:6a:33:31:80:8f:f6:fd:43:e5:dd:30:4f: 9c:28:5a:5b:93:0e:2c:cf:db:da:ea:41:d0:29:cb: c7:ba:b2:8b:8e:dd:c6:1d:b2:f4:fc:97:af:e2:42: be:60:f6:08:45:0c:7b:0f:40:e0:9d:78:23:36:36: 6c:35:3a:64:1a:cd:0a:37:aa:48:36:63:87:b7:df: 50:c1:7e:f6:a0:65:7d:59:15:4f:a5:fe:8c:af:31: 63:5f:5e:fc:8e:d2:af:d4:bb:91:77:a8:3c:88:03: 86:bc:82:0e:22:1e:3e:f4:79:c5:08:ea:4b:19:be: d8:e8:21:90:f7:b3:6c:76:f0:cc:7c:72:97:76:12: 63:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F8:C9:30:FF:48:D8:1B:32:53:E0:72:40:A0:3D:D9:6D:75:D4:3B X509v3 Authority Key Identifier: keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:63:19:88:95:6a:a9:36:47:ea:58:6b:a7:a0:54:84:74:de: 5c:a6:ad:02:e5:45:58:33:97:21:6b:d6:f1:59:1b:62:a8:63: bc:5d:0e:12:0b:27:39:eb:f8:e5:48:62:55:8a:e3:89:82:1d: 24:e3:d3:4d:3e:bc:1c:96:4b:c0:e0:8b:88:90:4b:24:47:88: 07:34:af:63:21:dc:ef:32:c7:0f:e0:7c:e0:a2:90:92:c9:62: f6:4b:5e:ef:f5:26:49:9e:27:db:42:4f:93:5b:75:13:10:d6: e6:9a:70:c0:84:68:38:d9:16:d6:9b:a2:00:b0:22:13:77:29: e0:b0:81:63:66:5c:6a:d8:26:b5:64:fa:13:26:50:2c:b4:0e: 69:4e:7d:49:eb:3a:40:f5:d6:76:b4:d7:05:dd:8d:28:2e:d3: 16:7a:1b:11:db:f8:3e:01:f9:98:00:f6:19:e0:93:63:e3:93: f8:ca:25:92:b3:bd:a8:94:1e:ac:3b:16:1a:55:98:8c:f2:d6: 1a:07:a1:b0:22:24:be:6e:88:3f:d3:6f:dd:fc:43:c1:68:b7: b3:93:2d:db:a0:91:b4:e9:32:18:7a:a8:bd:63:5c:37:21:c9: e1:27:f9:e5:0f:4c:d3:6f:23:c7:36:25:cf:94:ed:40:e0:8d: e1:38:c2:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4RDAxMTAvBgNVBAUTKDI1NEVBRjY0OTA3NTRGNTA3REI4MUNFOTBEREI2MjlC NjIyRjQ2NjAwHhcNMjUwNzE5MDUyNjQwWhcNMjUwNzI2MDUyNjQwWjAYMRYwFAYD VQQDEw02ODdiMmM5MC1kMDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21OfXLNZJ82mY5NUwneWRiJl6rG4lBIgV4DdN6c6LCt23+n0m0wHdIl+Jcu1 RWKc/BuuZChlkIgW4dZosI/uQ/DA/LzHHQgZQsbdyOOL1wu/Wfvb111iA4zWpyiu a2IskqwRy308VWGIPM1KFygGwPMvK9xImSs02WdqMzGAj/b9Q+XdME+cKFpbkw4s z9va6kHQKcvHurKLjt3GHbL0/Jev4kK+YPYIRQx7D0DgnXgjNjZsNTpkGs0KN6pI NmOHt99QwX72oGV9WRVPpf6MrzFjX178jtKv1LuRd6g8iAOGvIIOIh4+9HnFCOpL Gb7Y6CGQ97NsdvDMfHKXdhJjJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNv4yTD/ SNgbMlPgckCgPdltddQ7MB8GA1UdIwQYMBaAFCVOr2SQdU9Qfbgc6Q3bYptiL0Zg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjhEMC80MUUyQkUyOEVC NkUxMUVFODNFM0FFNTFDNEY5QUUwMi9KVTZ2WkpCMVQxQjl1QnpwRGR0aW0ySXZS bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pVNnZaSkIxVDFCOXVCenBEZHRpbTJJdlJtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjhEMC80MUUyQkUyOEVCNkUxMUVFODNFM0FFNTFDNEY5QUUwMi9KVTZ2WkpCMVQx Qjl1QnpwRGR0aW0ySXZSbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIYxmIlWqpNkfqWGunoFSEdN5cpq0C5UVYM5cha9bxWRtiqGO8XQ4S Cyc56/jlSGJViuOJgh0k49NNPrwclkvA4IuIkEskR4gHNK9jIdzvMscP4HzgopCS yWL2S17v9SZJnifbQk+TW3UTENbmmnDAhGg42RbWm6IAsCITdyngsIFjZlxq2Ca1 ZPoTJlAstA5pTn1J6zpA9dZ2tNcF3Y0oLtMWehsR2/g+AfmYAPYZ4JNj45P4yiWS s72olB6sOxYaVZiM8tYaB6GwIiS+bog/02/d/EPBaLezky3boJG06TIYeqi9Y1w3 IcnhJ/nlD0zTbyPHNiXPlO1A4I3hOMKM -----END CERTIFICATE-----Generated at Sun Jul 20 21:55:21 2025 by rpki-client